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CLAIMS 

1 . (PREVIOUSLY PRESENTED) A system for controlling access to digital services 
comprising: 

(a) a control center configured to coordinate and provide digital services; 

(b) an uplink center configured to receive the digital services from the control center and 
transmit the digital services to a satellite; 

(c) the satellite configured to: 

(i) receive the digital services from the uplink center; 

(ii) process the digital services; and 

(j£) transmit the digital services and configuration information for accessing the 
digital services to a subscriber receiver station; 

(d) the subscriber receiver station configured to: 

(j) receive the digital services and configuration information from the satellite; 
(ii) control access to the digital services through an integrated receiver/ decoder 

(TRD); 

(e) a conditional access module (CAM) communicatively coupled to the (IRD), wherein 
the CAM is configured to receive the configuration information, and wherein the configuration 
information has been transmitted asynchronously; and 

(f) a custom logic block within the CAM, wherein the custom logic block is configured to 
dynamically reconfigure a hardware state machine in the CAM based on the configuration information, 
wherein the hardware state machine comprises custom logic that is used to control access to the digital 
services and wherein the hardware state machine is not directly accessible to a system input/output 
module or system bus of the CAM. 

2. (ORIGINAL) The system of claim 1 wherein the CAM comprises a smart card. 

3. (ORIGINAL) The system of claim 1 wherein the configuration information is 
encrypted. 

4. (ORIGINAL) The system of claim 3 wherein the configuration information is 
encrypted through a key exchange protocol 
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5. (ORIGINAL) The system of claim 4 wherein the key exchange protocol composes a 
public key algorithm. 

6- (ORIGINAL) The system of claim 3 wherein the configuration information is received 
in uniquely encrypted, group encrypted packets. 

7. (ORIGINAL) The system of claim 3 wherein the custom logic block is further 
configured to: 

decrypt the configuration information; and 

store the configuration information in one or more protected registers. 

8. (ORIGINAL) The system of claim 1 wherein the custom logic block is further 
configured to verify that the configuration information is authentic 

9. (ORIGINAL) Hie system of claim 8 wherein the custom logic block is further 
configured to retain the configuration information if the configuration information is authentic. 

10. (ORIGINAL) The system of claim 1 wherein the custom logic block is further 
configured to receive a synchronous command to reconfigure the hardware state machine using the 
configuration information- 

11. (CANCELLED) 

12. (ORIGINAL) The system of claim 1 wherein the custom logic block comprises an 
asynchronous dynamic pre^ermucation module that employs a series of one ot more configurable 
multiplexors at the beginning of the hardware state machine. 

13. (ORIGINAL) The system of claim 1 wherein the custom logic block comprises an 
asynchronous dynamic post-permutation module that employs a series of one or more configurable 
multiplexors at the end of tie hardware state machine. 
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14. (ORIGINAL) The system of claim 1 wherein the custom logic block comprises a 
dedicated hardware reconfiguration and input/output module ihat connects the hardware state machine 
to a system bus of the CAM and controls access to logic of the hardware state machine. 

15. (PREVIOUSLY PRESENTED) A method for providing access to digital services 
comprising: 

(a) receiving configuration information in a security component comprising a smart card, 
wherein: 

(1) the configuration information has been transmitted asynchronously; and 

(2) the security component is configured to control access to the digital services; 

and 

(b) dynamically reconfiguring a hardware state machine in the security component based 
on the configuration information, wherein the hardware state machine comprises custom logjc that is 
used to control access to the digital services, and wherein a component of the hardware state machine is 
not directly accessible to a system input/ output module or system bus of the security component. 

16- (CANCELLED) 

17- (PREVIOUSLY PRESENTED) The method of claim 15 wherein the configuration 
information is received through a broadcast scream, Internet, or callback. 

18. (ORIGINAL) The method of claim 15 wherein the configuration information is 
encrypted. 

19. (ORIGINAL) The method of claim 18 wherein the configuration information is 
encrypted through a key exchange protocol. 

20. (ORIGINAL) The method of claim 19 wherein the key exchange protocol comprises a 
public key algorithm. 

21. (ORIGINAL) The method of claim 18 wherein the configuration information 
received in uniquely encrypted, group encrypted packets. 

-4- 

PAGE 6/19 ^ RCVD AT 6/27/2006 8:10:17 PM [Eastern Daylight Time] * SVR:USPT0-EFXRF-1/5 * DN!S:2738300 * CSID:3109640941 * DURATION (mm-ss):05-46 



06/2,772006 17:12 FAX 3109640941 



P & L LEGAL 



il 007/019 



22, (ORIGINAL) The method of claim 18 further comprising: 
decrypting the configuration information; and 

storing the configuration information in one or more protected registers. 

23, (ORIGINAL) The method of claim 15 further comprising verifying the configuration 
information is authentic. 



24. (ORIGINAL) The method of claim 23 further comprising retaining the configuration 
information if the configuration information is authentic, 

25. (ORIGINAL) The method of claim 15 further comprising receiving a synchronous 
command to reconfigure the hardware state machine using the configuration information. 

26. (CANC ELLED ) 

27. (ORIGINAL) The method of claim 15 wherein the dynamic reconfiguration of the 
hardware state machine reconfigures a permutation that employs a series of one or more configurable 
multiplexors at the beginning of the hardware state machine. 

28. (ORIGINAL) The method of claim 15 wherein the dynamic reconfiguration of the 
hardware state machine reconfigures a permutation that employs a series of one or more configurable 
multiplexors at the end of the hardware state machine. 

29. (ORIGINAL) The method of claim 1 5 wherein a dedicated hardware reconfiguration 
and input/output module connects the hardware state machine to a system bus of the security 
component and controls access to logic of the hardware state machine. 

30. (PREVIOUSLY PRESENTED) A system for providing access to digital services 
comprising: 

(a) a conditional access module (CAM) configured to receive configuration information for 
accessing the digital services, wherein the configuration information has been transmitted 
asynchronously; and 
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(b) a custom logic block configured to dynamically reconfigure a hardware state machine in 
the CAM based on the configuration information, wherein the hardware state machine comprises 
custom logic that is used to control access to the digital services, and wherein a component of the 
hardware state machine is not direcdy accessible to a system input/output module or system bus of die 
CAM. 

31 . (ORIGINAL) The system of claim 30 wherein the CAM comprises a smart card. 

32. (PREVIOUSLY PRESENTED) Hie system of claim 30 wherein the configuration 
information is received through a broadcast stream, Internet, or callback. 

33. (ORIGINAL) The system of claim 30 wherein the configuration information is 
encrypted. 

34. (ORIGINAL) The system of claim 33 wherein the configuration information is 
encrypted through a key exchange protocol 

35. (ORIGINAL) The system of claim 34 wherein the key exchange protocol comprises a 
public key algorithm- 

36. (ORIGINAL) The system of claim 33 wherein the configuration information is 
received in uniquely encrypted, group encrypted packets. 

37. (ORIGINAL) The system of claim 33 wherein the custom logic block is further 
configured to: 

decrypt the configuration information; and 

store the configuration information in one or more protected registers. 

38. (ORIGINAL) The system of claim 30 wherein the custom logic block is further 
configured to verify that the configuration information is authentic. 
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39. (ORIGINAL) The system of claim 38 wherein the custom logic block is further 
configured to retain the configuration information if the configuration information is authentic. 

40. (ORIGINAL) The system of claim 30 wherein the custom logic block is further 
configured to receive a synchronous command to reconfigure the hardware state machine using the 
configuration mformation. 

41. (CANCELLED) 

42. (ORIGINAL) The system of claim 30 wherein the custom logic block comprises an 
asynchronous dynamic pre-permutation module that employs a series of one or more configurable 
multiplexors at the beginning of the hardware state machine. 

43. (ORIGINAL) The system of claim 30 wherein the custom logic block comprises an 
asynchronous dynamic post-permutation module that employs a series of one or more configurable 
multiplexors at the end of the hardware state machine, 

44- (ORIGINAL) The system of claim 30 wherein the custom logic block comprises a 
dedicated hardware reconfiguration and input/output module that connects the hardware state machine 
to a system bus of the CAM and controls access to logic of the hardware state machine. 

45. (PREVIOUSLY PRESENTED) An article of manufacture for providing access to 
digital services comprising: 

(a) means for receiving configuration information in a security component comprising a 
smart card, wherein: 

(1) the configuration information has been transmitted asynchronously; and 

(2) the security component is configured to control access to the digital services; 

and 

(b) means for dynamically reconfiguring a hardware state machine in the security 
component based on the configuration information, wherein the hardware state machine comprises 
custom logic that is used to control access to the digital services, and wherein a component of the 
hardware state machine is not directly accessible to a system input/output module or system bus of the 
security component. 
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46. (CANCELLED) 

47. (PREVIOUSLY PRESENTED) The article of manufacture of claim 45 wherein the 
configuration information is received through a broadcast stream, Internet, or callback. 

48. (ORIGINAL) The article of manufacture of claim 45 wherein the configuration 
information is encrypted. 

49. (ORIGINAL) The article of manufacture of claim 48 wherein the configuration 
information is encrypted through a key exchange protocol 

50. (ORIGINAL) The article of manufacture of claim 49 wherein the key exchange 
protocol comprises a public key algorithm. 

51 . (ORIGINAL) The article of manufacture of claim 48 wherein the configuration 
information is received in uniquely encrypted, group encrypted packets. 

52- (ORIGINAL) The article of manufacture of claim 48 further comprising: 
means for decrypting the configuration information; and 

means for storing the configuration information in one or more protected registers. 

53. (ORIGINAL) The article of manufacture of claim 45 further comprising means for 
verifying the configuration information is authentic 

54. (ORIGINAL) Hie article of manufacture of claim 53 further comprising means for 
retaining the configuration information if the configuration information is authentic 

55. (ORIGINAL) The article of manufacture of claim 45 further comprising means for 
receiving a synchronous command to reconfigure the hardware state machine using die configuration 
information. 



56. (CANCELLED) 
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57. (ORIGINAL) The article of manufacture of claim 45 wherein the dynamic 
reconfiguration of the hardware state machine reconfigures a permutation that employs a series of one 
or more configurable multiplexors at the beginning of the hardware state machine. 

58. (ORIGINAL) The article of manufacture of claim 45 wherein the dynamic 
reconfiguration of the hardware state machine reconfigures a permutation that employs a series of one 
or more configurable multiplexors at the end of the hardware state machine. 

59. (ORIGINAL) The article of manufacture of claim45 wherein a dedicated hardware 
reconfiguration and input/ output module connects the hardware state machine to a system bus of the 
security component and controls access to logic of the hardware state machine. 
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